Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by MurrayMcAllister:
http://fedoraproject.org/wiki/Docs/Beats/Security?action=diff&rev2=44&rev1=…
The comment on the change is:
editorial pass on new content added after f8 release...
------------------------------------------------------------------------------
=== Security Enhancements ===
- * Fedora continues to improve its many proactive [http://fedoraproject.org/wiki/Security/Features security features].
+ Fedora continues to improve its many proactive [http://fedoraproject.org/wiki/Security/Features security features]:
- * The `glibc` package in Fedora 8 had [http://people.redhat.com/drepper/sha-crypt.html support] for passwords using SHA256 and SHA512 hashing. Before only DES and MD5 were available. The tools have now been extended in Fedora 9. Password hashing using the SHA-256 and SHA-512 hash functions is now supported.
+ * The `glibc` package in Fedora 8 had [http://people.redhat.com/drepper/sha-crypt.html support] for passwords using SHA256 and SHA512 hashing. Previously, only DES and MD5 were available. The tools have now been extended in Fedora 9. Password hashing using the SHA-256 and SHA-512 hash functions is now supported.
- To switch to SHA-256 or SHA-512 on an installed system, use `authconfig --passalgo=sha256 --update` or `authconfig --passalgo=sha512 --update`. You can also configure the hashing method in a GUI using `authconfig-gtk`. Existing user accounts won't be affected until their passwords are changed.
+ To switch to SHA-256 or SHA-512 on an installed system, use {{{authconfig --passalgo=sha256 --update}}} or {{{authconfig --passalgo=sha512 --update}}}. Alternatively, use the {{{authconfig-gtk}}} GUI tool to configure the hashing method. Existing user accounts will not be affected until their passwords are changed.
- SHA-512 is used by default on newly installed systems. Other algorithms can be configured only for kickstart installations, by using the `--passalgo` or `--enablemd5` options of the kickstart command `auth`. If your installation does not use kickstart, use `authconfig` as described above, then change the `root` password and passwords of any other users created after installation.
+ SHA-512 is used by default on newly installed systems. Other algorithms can be configured only for kickstart installations, by using the `--passalgo` or `--enablemd5` options for the kickstart `auth` command. If your installation does not use kickstart, use `authconfig` as described above, and then change the `root` password, and passwords for other users created after installation.
- New options were added to `libuser`, `pam` and `shadow-utils` to support these password hashing algorithms. `authconfig` configures all these options automatically, so it is usually not necessary to modify them manually.
+ New options were added to `libuser`, `pam`, and `shadow-utils`, to support these password hashing algorithms. Running {{{authconfig}}} configures all these options automatically, so it is not necessary to modify.
+ * New values for the `crypt_style` option, and the new options `hash_rounds_min`, and `hash_rounds_max`, are now supported in the `[defaults]` section of `/etc/libuser.conf`. Refer to the `libuser.conf(5)` man page for details.
- * New values of the `crypt_style` option and new options `hash_rounds_min` and `hash_rounds_max` are now supported in the
- `[defaults]` section of `/etc/libuser.conf`. Refer `libuser.conf(5)` for more details.
- * New options `sha256`, `sha512` and `rounds` are now supported by the `pam_unix` PAM module. Refer `pam_unix(8)`for more details.
+ * New options `sha256`, `sha512`, and `rounds`, are now supported by the `pam_unix` PAM module. Refer to the `pam_unix(8)` man page for details.
- * New options `ENCRYPT_METHOD`, `SHA_CRYPT_MIN_ROUNDS` and `SHA_CRYPT_MAX_ROUNDS` are now supported in `/etc/login.defs`. Refer `login.defs(5)` for more details. Corresponding options were added to `chpasswd(8)` and `newusers(8)`.
+ * New options `ENCRYPT_METHOD`, `SHA_CRYPT_MIN_ROUNDS`, and `SHA_CRYPT_MAX_ROUNDS`, are now supported in `/etc/login.defs`. Refer to the `login.defs(5)` man page for details. Corresponding options were added to `chpasswd(8)` and `newusers(8)`.
=== General Information ===
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by KevinKofler:
http://fedoraproject.org/wiki/Docs/Beats/Desktop?action=diff&rev2=115&rev1=…
The comment on the change is:
s/have either been/have been either/
------------------------------------------------------------------------------
* `gwenview` is now part of `kdegraphics`.
* `kiconedit` and `kcoloredit`, which used to be part of `kdegraphics`, are now separate packages.
* `kmid`, which used to be part of `kdemultimedia`, is now a separate package.
- * The Fedora KDE SIG decided to drop the `-extras` subpackages, which contained deprecated or unstable applications, because those applications have either been fixed or dropped in KDE 4.
+ * The Fedora KDE SIG decided to drop the `-extras` subpackages, which contained deprecated or unstable applications, because those applications have been either fixed or dropped in KDE 4.
* `kdeadmin-kpackage` has been split out of `kdeadmin` because KPackage now depends on `smart`.
* KDE 4 dropped the `kdeaddons` module. Therefore, there is no `kdeaddons` package in Fedora 9. The Atlantik Designer, for use with `kdegames3`, is still available as `kdeaddons-atlantikdesigner`. `ksig` is now its own package. `extragear-plasma` replaces the Kicker addons. The Konqueror plugins are being packaged as a separate `konq-plugins` package.
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by KevinKofler:
http://fedoraproject.org/wiki/Docs/Beats/Desktop?action=diff&rev2=114&rev1=…
The comment on the change is:
Document the workspace, package and application changes due to KDE 4.
------------------------------------------------------------------------------
Since `knetworkmanager` does not work with the version of '''NetworkManager''' available in this release, the KDE Live images use `nm-applet` from `NetworkManager-gnome` as a replacement. The `gnome-keyring-daemon` facility saves passwords for these encryption technologies. (The dummy `knetworkmanager` package from Fedora 8 which only called `nm-applet` is no longer used.)
As the native KWin window manager now optionally supports compositing and desktop effects, the KDE Live images no longer include Compiz/Beryl. KWin's compositing/effects mode is disabled by default, but can be enabled in `systemsettings`.
+
+ ==== Workspace Changes ====
+
+ * Plasma replaces the old Kicker and KDesktop. Plasma manages both the panel and the desktop, and it is now possible to place the same Plasma applets (plasmoids) on both the panel and the desktop if the applet supports the size restrictions imposed by the panel.
+ * The old KDE Control Center (KControl) has been replaced by System Settings (`systemsettings`).
+ * The KDM login manager uses a new theme format. Therefore, KDM themes written for KDE 3 will not work with the KDM in KDE 4. KDM now includes support for theme configuration, thus the external `kdmtheme` tool is no longer needed.
+ All the above applications can be found in the `kdebase-workspace` package.
+
+ ==== Package and Application Changes ====
+
+ * `qt`, `kdelibs` and `kdebase` now represent the KDE 4 version, obsoleting the `qt4`, `kdelibs4` and `kdebase4` packages in previous releases of Fedora.
+ * The Qt/KDE 3 versions have been renamed `qt3`, `kdelibs3` and `kdebase3`. Note that Fedora 9 only includes parts of `kdebase3`. See the ''Backwards Compatibility'' section for details.
+ * Upstream KDE has split the `kdebase` module into three modules: `kdebase-runtime`, `kdebase` (sometimes called `kdebase-apps` to distinguish it from the old monolithic `kdebase`) and `kdebase-workspace`. This split is reflected in the Fedora packages.
+ * Fedora 9 adds a `kdegames3` package containing the games not yet ported to KDE 4.
+ * Dolphin, which is part of `kdebase`, replaces `d3lphin`.
+ * The `kdebase-workspace` package now includes support for KDM theme configuration, and therefore obsoletes `kdmtheme`.
+ * Okular replaces KPDF, KGhostView and KFax in `kdegraphics`.
+ * The `kaider` package replaces KBabel, which used to be part of `kdesdk`.
+ * The `okteta` package replaces KHexEdit, which used to be part of `kdeutils`.
+ * `kalgebra` and `marble` are now part of `kdeedu`.
+ * `ksudoku` is now part of `kdegames`.
+ * `gwenview` is now part of `kdegraphics`.
+ * `kiconedit` and `kcoloredit`, which used to be part of `kdegraphics`, are now separate packages.
+ * `kmid`, which used to be part of `kdemultimedia`, is now a separate package.
+ * The Fedora KDE SIG decided to drop the `-extras` subpackages, which contained deprecated or unstable applications, because those applications have either been fixed or dropped in KDE 4.
+ * `kdeadmin-kpackage` has been split out of `kdeadmin` because KPackage now depends on `smart`.
+ * KDE 4 dropped the `kdeaddons` module. Therefore, there is no `kdeaddons` package in Fedora 9. The Atlantik Designer, for use with `kdegames3`, is still available as `kdeaddons-atlantikdesigner`. `ksig` is now its own package. `extragear-plasma` replaces the Kicker addons. The Konqueror plugins are being packaged as a separate `konq-plugins` package.
=== Web Browsers ===
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by KevinKofler:
http://fedoraproject.org/wiki/Docs/Beats/Desktop?action=diff&rev2=113&rev1=…
The comment on the change is:
Add a paragraph about the new features in KDE 4.0, based on the paragraph from the one-sheet release notes (thanks JonathanRoberts and RahulSundaram), with an added link to the KDE 4.0 announcement.
------------------------------------------------------------------------------
=== KDE ===
This release features [http://kde.org/announcements/announce-4.0.2.php KDE] [[GetVal(DocsDict,KDEVer)]]. As the `kdepim` and `kdevelop` packages are not part of KDE 4.0 and `kdewebdev` is only partially available (no Quanta) in KDE 4.0, the KDE 3.5.9 versions of those packages are shipped.
+
+ [http://www.kde.org/announcements/4.0/ KDE 4.0] features upgrades to core components such as the port to Qt 4. It also introduces a number of brand new frameworks such as the Phonon, a multimedia API; Solid, a hardware integration framework; Plasma, a re-written desktop and panel with many new concepts; integrated desktop search; compositing as a feature of KWin; and a brand new visual style called Oxygen. [http://kde.org/announcements/announce-4.0.2.php KDE 4.0.2] is a bugfix release from the KDE 4.0 release series.
Fedora 9 does '''not''' include the legacy KDE 3 Desktop. It does include a compatibility KDE 3 Development Platform, which can be used to build and run KDE 3 applications within KDE 4 or any other desktop environment. See the ''Backwards Compatibility'' section for more details about what is included.
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by MurrayMcAllister:
http://fedoraproject.org/wiki/Docs/Beats/MailServers?action=diff&rev2=7&rev…
The comment on the change is:
fixing headings...
------------------------------------------------------------------------------
+ = Mail Servers =
- {{{#!html
- <h2>Mail Servers</h2>}}}
This section concerns electronic mail servers or mail transfer agents (MTAs).
## USE THIS FOR EVERY RELEASE -- LOW-DRAG FAQ FOR NEW ADMINS.
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by MurrayMcAllister:
http://fedoraproject.org/wiki/Docs/Beats/MailServers?action=diff&rev2=7&rev…
The comment on the change is:
adding sendmail section I removed from http://fedoraproject.org/wiki/Docs/Beats/SystemDaemons
------------------------------------------------------------------------------
+ = Mail Servers =
- {{{#!html
- <h2>Mail Servers</h2>}}}
This section concerns electronic mail servers or mail transfer agents (MTAs).
## USE THIS FOR EVERY RELEASE -- LOW-DRAG FAQ FOR NEW ADMINS.
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by MurrayMcAllister:
http://fedoraproject.org/wiki/Docs/Beats/SystemDaemons?action=diff&rev2=14&…
The comment on the change is:
removing section since it is repeated in http://fedoraproject.org/wiki/Docs/Beats/MailServers
------------------------------------------------------------------------------
Fedora [[GetVal(DocsDict,BeatsVer)]] features the Upstart initialization system. All System V init scripts should run fine in compatibility mode. However, users who have made customizations to their `/etc/inittab` file will need to port those modifications to upstart. For information on writing upstart scripts, see [http://upstart.ubuntu.com/getting-started.html the Upstart Getting Started Guide].
- ## USE THIS FOR EVERY RELEASE -- LOW-DRAG FAQ FOR NEW ADMINS.
- == Sendmail ==
-
- By default, the Sendmail mail transport agent (MTA) does not accept network connections from any host other than the local computer. To configure Sendmail as a server for other clients:
-
- 1. Edit `/etc/mail/sendmail.mc` and either change the `DAEMON_OPTIONS` line to also listen on network devices, or comment out this option entirely using the `dnl` comment delimiter.
- 1. Install the `sendmail-cf` package:
- {{{
- yum install sendmail-cf
- }}}
- 1. Regenerate `/etc/mail/sendmail.cf`:
- {{{
- make -C /etc/mail
- }}}
-
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by MurrayMcAllister:
http://fedoraproject.org/wiki/Docs/Beats/Devel/Tools/GCC?action=diff&rev2=2…
The comment on the change is:
removing items with 'no content'
------------------------------------------------------------------------------
==== GCC Compiler Collection ====
This release of Fedora has been built with GCC [[GetVal(DocsDict,gccVer)]], which is included with the distribution.
-
- ===== Caveats =====
-
- ''No content''
===== Code Generation =====
Starting with `gcc-4.1.2-25` and `glibc-2.6.90-14`, the `-D_FORTIFY_SOURCE=2` option protects not only C code, but also C++. There have been several security
issues already which would have been unexploitable if this checking was in place earlier. Refer to this [https://www.redhat.com/archives/fedora-devel-announce/2007-September/msg000… announcement] for more details.
- ===== Language Extensions =====
-
- ''No content''
-
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by JensPetersen:
http://fedoraproject.org/wiki/Docs/Beats/I18n?action=diff&rev2=133&rev1=132
The comment on the change is:
imsettings
------------------------------------------------------------------------------
* The `thaifonts-scalable` package has been added, so finally there are Thai TrueType fonts in Fedora.
=== Input Methods ===
-
+ It is now possible to start and stop the of Input Methods in GTK applications during runtime thanks to the new `imsettings` framework. The `GTK_IM_MODULE` environment variable is no longer needed by default but can still be used to override the imsettings.
==== im-chooser ====
- FIXME: need notes about new Desktop IM integration.
+ With the new imsettings framework, `im-chooser` can now start and stop Input Method usage dynamically on the GNOME Desktop.
Input methods only start by default on desktops running in an Asian locale. The current locale list is: `as`, `bn`, `gu`, `hi`, `ja`, `kn`, `ko`, `ml`, `mr`, `ne`, `or`, `pa`, `si`, `ta`, `te`, `th`, `ur`, `vi`, `zh`. Use `im-chooser` via ''System -> Preferences -> Personal -> Input Method'' to enable or disable Input method usage on your desktop.
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Fedora Project Wiki" for change notification.
The following page has been changed by ThomasFitzsimmons:
http://fedoraproject.org/wiki/Docs/Beats/Java?action=diff&rev2=87&rev1=86
------------------------------------------------------------------------------
=== OpenJDK 6 ===
- Fedora 9 includes OpenJDK 6, an open source implementation of the Java Platform, Standard Edition.
+ Fedora 9 includes OpenJDK 6, an open source implementation of the Java Platform, Standard Edition. OpenJDK 6 is not yet Java compatible; work is underway to certify it.
Fedora will track Sun's stable OpenJDK 6 branch.
@@ -13, +13 @@
The OpenJDK 6 packages, `java-1.6.0-openjdk\*`, replace their IcedTea counterparts, `java-1.7.0-icedtea\*`. The Fedora 8 IcedTea packages track the unstable OpenJDK 7 branch, whereas the `java-1.6.0-openjdk\*` packages track the stable OpenJDK 6 branch. The decision to have OpenJDK 6 replace IcedTea was made for several reasons:
- * Sun has replaced most of the encumbrances for which IcedTea was providing replacements for.
+ * Sun has replaced most of the encumbrances for which IcedTea was providing replacements.
* IcedTea's mandate is to merge as much as possible with OpenJDK, so the differences between IcedTea and OpenJDK should diminish over time.
* OpenJDK 6 is a stable branch, whereas OpenJDK 7 is unstable, and is not expected to ship a stable release until 2009.
* Sun has licensed the OpenJDK trademark for use in Fedora.
* Shipping both OpenJDK 6 and IcedTea would have been confusing, and would have added size to the distribution.
- IcedTea continues to provide autotools support ({{{autoconf}}}, {{{automake}}}, {{{libtool}}}, and so on), a portable interpreter for PowerPC and 64-bit PowerPC architectures, plugin support, Java Web Start support, and patches to integrate OpenJDK into Fedora. The IcedTea sources are included in the `java-1.6.0-openjdk` SRPM.
+ IcedTea continues to provide autotools support ({{{autoconf}}}, {{{automake}}}, {{{libtool}}}, and so on), a portable interpreter for PowerPC and 64-bit PowerPC architectures, plugin support, Web Start support, and patches to integrate OpenJDK into Fedora. The IcedTea sources are included in the `java-1.6.0-openjdk` SRPM.
-
- OpenJDK 6 is not Java compatible; work is underway to certify it.
=== Handling Java Applets ===
@@ -31, +29 @@
* The `gcjwebplugin` adaptation does not support [https://bugzilla.redhat.com/show_bug.cgi?id=304031 signed applets]. Signed applets will run in untrusted mode. Experimental support for signed applets is present in the IcedTea repository, but it is not ready for deployment in Fedora.
* The `gcjwebplugin` security policy may be too restrictive. To enable restricted applets, run the {{{firefox -g}}} command in a terminal window to see what is being restricted, and then grant the restricted permission in the `/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/lib/security/java.policy` file.
- === Handling Java Web Start Applications ===
+ === Handling Web Start Applications ===
- Upstream OpenJDK does not provide Java Web Start support. Experimental Java Web Start support is present in the IcedTea repository, but is not ready for deployment in Fedora.
+ Upstream OpenJDK does not provide Web Start support. Experimental Web Start support via [http://jnlp.sourceforge.net/ NetX] is present in the IcedTea repository, but is not ready for deployment in Fedora.
=== Fedora and JPackage ===